News for hackers. Stuff that matters.

A comment on Leaked phone number of Mark Zuckerberg reveals he is on Signal. Parent comment

Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by deepstack on Tuesday April 06, 2021 @02:27AM (#26708627)
https://app.wire.com already has that feature and it is based on signal protocol.
[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by arkadiyt on Tuesday April 06, 2021 @02:53AM (#26708836)
Wire uses MLS [1], it has nothing to do with the Signal protocol.

[1]: https://messaginglayersecurity.rocks/

[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by sdfzug on Tuesday April 06, 2021 @04:40AM (#26709530)
afaik Wire works on MLS like many others do - but according to Wikipedia Wire uses the Signal Protocol. Your "source" does not back up your claim
[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by creata on Tuesday April 06, 2021 @04:57AM (#26709640)
I just read the Wikipedia page and it says, emphasis mine:

> Wire's instant messages are encrypted with Proteus, a protocol that Wire Swiss developed based on the Signal Protocol.

That doesn't sound like "Wire uses the Signal Protocol" to me.

[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by uoaei on Tuesday April 06, 2021 @02:34AM (#26708670)
Has it been audited by external, independent security researchers?
[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by AvocadoCake on Tuesday April 06, 2021 @06:33AM (#26710238)
https://wire.com/en/security/#audits

Yes, with published reports, but it looks like they haven't published new ones in a few years.

[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by Bancakes on Tuesday April 06, 2021 @02:37AM (#26708693)
Yes, it's open source and anyone can look at the source code instead of appealing to authority.
[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by uoaei on Tuesday April 06, 2021 @02:40AM (#26708728)
That's not what I asked. Generally laypeople are not going to be good judges of whether or not an encryption protocol is sufficiently secure.

Has it been audited by security researchers?

[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by Bancakes on Tuesday April 06, 2021 @02:44AM (#26708760)
You're assuming it takes considerable skill to fuzz an algorithm or look for back doors and easter eggs? To answer your question, I don't know if Wire's been audited by paid researchers. I personally prefer a customer-exposed product whose each commit you can look up rather than the remote promise of security in a locked and hidden program.
[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by saagarjha on Tuesday April 06, 2021 @07:08AM (#26710445)
> You're assuming it takes considerable skill to fuzz an algorithm or look for back doors and easter eggs?

This is usually a good assumption.

[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by hashhar on Tuesday April 06, 2021 @02:50AM (#26708816)
Why can't it be both?

Bitwarden is open-source (both the server and clients) AND has been independently audited for a security review.

[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by uoaei on Tuesday April 06, 2021 @04:05PM (#26716727)
It is not impossible to create code which looks like it does one thing while simultaneously doing ya-mother.

http://underhanded-c.org/

[ Parent | on HN ]
Re:Leaked phone number of Mark Zuckerberg reveals he is on S... by gsich on Tuesday April 06, 2021 @07:37AM (#26710640)
"look" is a weak word. Anyone with eyes can look.
[ Parent | on HN ]